
Security requirements 17
Figure 3
Sample MCG 3100 firewall configuration
If a user calls a client, the SIP signaling comes through the SPS. Real
Time Protocol (RTP) for announcements or MC 3100 Instant Conference
calls takes place between the MCG 3100 and the IP telephone without
using the SPS.
To allow public internet traffic to reach the MCG 3100 from clients, while
simultaneously providing MCG 3100 access to the ECS TLAN for SIP
and RTP, you must carefully consider the data network and security
requirements of the Enterprise.
Proprietary communication between the MCG 3100 and the MCC 3100 for
BlackBerry (without the BES, using HTTP), the MCC 3100 for Nokia (using
HTTPS), and the MCC 3100 for Windows Mobile (using HTTPS) enables
clients to initiate and modify calls for the user on the ECS. In the BES
configuration, the MCC 3100 for BlackBerry communicates with the BES,
which communicates with the MCG 3100. The MCC 3100 for Nokia and
MCC 3100 for Windows Mobile communicates directly with the MCG 3100,
as well as the MCC 3100 for BlackBerry when configured without the BES.
Access to user records in an active directory server configured against the
MCG 3100 uses a tunnel over HTTP or HTTPS. Configure the MCG 3100
to specify the query search base, which limits the search to a subtree of
the base.
Nortel Mobile Communication 3100
Nortel Mobile Communication 3100 Planning and Engineering
NN42030-200 04.01 2 October 2009
Copyright © 2007-2009 Nortel Networks. All Rights Reserved.
.
Komentarze do niniejszej Instrukcji